$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: hR4Cql7vsoF9VCA/6/OOLOTHUvo4H3eLQziGSwUUmvI= Subject key identifier: 21:93:35:BF:47:82:44:BA:AC:0A:CA:3A:EB:49:CD:50:89:42:8E:10 Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 04C3 Signing time: Fri 22 Aug 2025 17:30:52 +0000 Manifest this update: Fri 22 Aug 2025 17:30:51 +0000 Manifest next update: Fri 29 Aug 2025 17:30:51 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: 26QB3+B/upkQ3S3SrJVGFomLIsbrKgLCe/Gn7lQtzxU=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: Aug 22 17:30:51 2025 GMT Not After : Aug 29 17:30:51 2025 GMT Subject: CN=68a8a94b-98e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:6d:df:ca:45:1e:92:13:75:e5:e1:ff:b4: f7:07:c4:a1:f1:dc:fe:cd:2a:d0:96:b4:56:08:f6: bf:59:5b:80:9f:f0:5b:44:1b:43:6b:6f:7b:87:1e: 4d:81:9b:73:ca:ac:03:87:6b:0d:af:3b:10:15:f6: 19:61:41:39:b8:46:d5:45:05:3f:de:5a:e4:48:42: d0:50:ee:6d:8b:74:ca:04:9f:3d:1f:4f:2b:4a:3f: be:2b:52:e9:fb:72:02:a4:32:ab:c6:f2:98:43:51: 41:b0:f7:70:ea:d3:b6:a5:19:c3:07:c9:11:75:43: cf:90:d6:15:9b:84:8a:79:ba:7b:5a:c5:d4:56:f2: 7c:c5:f8:fc:f3:a8:8e:8b:0b:34:3f:79:7b:72:39: 14:2f:66:ea:e8:db:c4:27:e3:16:21:ef:f0:12:bd: bd:89:ab:8b:3d:b0:7a:30:eb:f7:02:7b:5e:d2:4d: 45:92:6f:99:30:5a:05:29:a2:2b:29:35:43:1f:6a: 4e:c8:15:e5:47:d4:53:4e:f5:d5:a3:62:e6:81:24: fb:5d:0e:dc:7c:39:dd:2a:63:30:56:92:cd:89:44: 80:75:b3:c8:61:f1:ad:7b:0c:7d:68:1b:8a:51:0f: 01:7d:52:61:7b:11:c6:35:90:9a:ff:bd:d4:26:a1: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:35:BF:47:82:44:BA:AC:0A:CA:3A:EB:49:CD:50:89:42:8E:10 X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:34:66:87:bd:c8:bd:71:c2:b0:11:3f:ac:b3:1e:bb:15:64: 85:c1:65:62:52:31:09:fd:b2:44:99:be:27:12:d3:79:cc:a2: 34:73:07:e3:d0:f4:3e:14:9d:ca:b9:d9:bb:a3:22:13:e4:57: eb:06:bf:ac:dc:2c:3a:fc:2a:16:0b:8a:0e:cc:04:12:b9:25: 0a:64:50:7c:93:7a:88:ba:f8:92:6f:dd:e2:95:28:8f:95:0a: 1c:cb:f2:33:3e:60:21:55:6b:a3:0b:50:d0:72:10:51:2b:6b: 14:60:91:45:bb:e4:0c:4c:39:7a:8a:22:32:17:b5:fe:ac:c9: 20:38:1a:76:1a:88:f0:10:95:86:08:15:05:b3:89:ed:a9:24: 3b:4b:1a:a2:09:3a:9f:2c:52:50:1d:b2:8b:78:87:8c:ab:65: 14:c5:82:26:35:a4:18:41:24:20:f9:a6:d1:33:db:09:88:0d: 97:78:b1:49:d4:32:f1:43:bb:0c:d1:a8:fe:6a:1b:9e:94:8b: 6f:ba:16:85:3b:4f:34:8e:c0:5a:67:d5:3e:70:ce:53:83:f8: 74:34:a3:3e:63:d9:ac:61:5e:a5:79:e0:16:24:32:67:34:60: 6e:44:ff:22:3d:21:9e:df:1d:cd:c8:81:2c:60:80:fd:9a:3d: 34:9a:c6:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUwODIyMTczMDUxWhcNMjUwODI5MTczMDUxWjAYMRYwFAYD VQQDEw02OGE4YTk0Yi05OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymVt38pFHpITdeXh/7T3B8Sh8dz+zSrQlrRWCPa/WVuAn/BbRBtDa297hx5N gZtzyqwDh2sNrzsQFfYZYUE5uEbVRQU/3lrkSELQUO5ti3TKBJ89H08rSj++K1Lp +3ICpDKrxvKYQ1FBsPdw6tO2pRnDB8kRdUPPkNYVm4SKebp7WsXUVvJ8xfj886iO iws0P3l7cjkUL2bq6NvEJ+MWIe/wEr29iauLPbB6MOv3Ante0k1Fkm+ZMFoFKaIr KTVDH2pOyBXlR9RTTvXVo2LmgST7XQ7cfDndKmMwVpLNiUSAdbPIYfGtewx9aBuK UQ8BfVJhexHGNZCa/73UJqGOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGTNb9H gkS6rArKOutJzVCJQo4QMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlNGaHvci9ccKwET+ssx67FWSFwWViUjEJ/bJEmb4nEtN5zKI0cwfj 0PQ+FJ3Kudm7oyIT5FfrBr+s3Cw6/CoWC4oOzAQSuSUKZFB8k3qIuviSb93ilSiP lQocy/IzPmAhVWujC1DQchBRK2sUYJFFu+QMTDl6iiIyF7X+rMkgOBp2GojwEJWG CBUFs4ntqSQ7SxqiCTqfLFJQHbKLeIeMq2UUxYImNaQYQSQg+abRM9sJiA2XeLFJ 1DLxQ7sM0aj+ahuelItvuhaFO080jsBaZ9U+cM5Tg/h0NKM+Y9msYV6leeAWJDJn NGBuRP8iPSGe3x3NyIEsYID9mj00msaQ -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:28 2025 by rpki-client